We take security very seriously and try to patch each discovered security vulnerability as soon as possible. Also we use automated tools to continually monitor vulnerable dependencies.
We use full disclosure for reporting vulnerabilities. Therefore please submit vulnerability reports through our issues section.